Vulnerabilities

TI-2026-62481 CVE-2026-92712 · GHSA-266f-7ffp-mgv7

ReactPress <= 3.4.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'permalink' Parameter

LOW 28

The ReactPress – Create React App for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'permalink' parameter in all versions up to, and including, 3.4.0 due to insufficient input saniti…

CVSS 3.1MEDIUM 6.4 Network Low privileges No interaction EPSS 0.00192 Published 2026-09-30 No fix listed CWE-79

TI-2026-47209 CVE-2026-66455 · GHSA-h8rh-5pc8-x2wc

WordPress ReactPress plugin <= 3.4.0 - Broken Access Control vulnerability

LOW 26

Subscriber Broken Access Control in ReactPress <= 3.4.0 versions.

CVSS 3.1MEDIUM 6.0 Network Low privileges No interaction EPSS 0.00205 Published 2026-08-13 No fix listed CWE-862

TI-2018-15940 CVE-2018-1000543 · GHSA-f254-p522-ph96

Akiee version 0.0.3 contains a XSS leading to code execution due to the use of node…

LOW 30

Akiee version 0.0.3 contains a XSS leading to code execution due to the use of node integration vulnerability in "Details" of a task is not validated that can result in XSS leading to abritrary code execution.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01184 Published 2018-06-26 No fix listed CWE-79

Vulnerabilities

Filters

ReactPress <= 3.4.0 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'permalink' Parameter

WordPress ReactPress plugin <= 3.4.0 - Broken Access Control vulnerability

Akiee version 0.0.3 contains a XSS leading to code execution due to the use of node…